feat(rewrite): isolate future root and harden database runtime

.github/workflows/dashboard-checks.yml

@@ -13,66 +13,6 @@ concurrency:
     cancel-in-progress: true
 
 jobs:
-    server-foundation:
-        name: server-foundation
-        runs-on: ubuntu-latest
-        timeout-minutes: 10
-        steps:
-            - name: Checkout
-              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-              with:
-                  persist-credentials: false
-
-            - name: Set up Bun
-              uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
-              with:
-                  bun-version-file: .bun-version
-
-            - name: Install dependencies
-              run: bun install --frozen-lockfile
-
-            - name: Check source boundaries
-              run: bun run check:boundaries
-
-            - name: Test source-boundary checker
-              run: bun run test:boundaries
-
-            - name: Type-check browser source
-              run: bun run typecheck:browser
-
-            - name: Type-check contracts and shared source
-              run: bun run typecheck:contracts
-
-            - name: Type-check qualification probes
-              run: bun run typecheck:qualification
-
-            - name: Type-check repository scripts
-              run: bun run typecheck:scripts
-
-            - name: Type-check server source
-              run: bun run typecheck:server
-
-            - name: Type-check worker source
-              run: bun run typecheck:worker
-
-            - name: Test qualification probes
-              run: bun run test:qualification
-
-            - name: Test server source
-              run: bun run test:server
-
-            - name: Test documentation generator
-              run: bun run test:server:docs
-
-            - name: Test server tooling
-              run: bun run test:server:tooling
-
-            - name: Verify generated documentation
-              run: bun run docs:check
-
-            - name: Verify migration graph
-              run: bun run db:check
-
     frontend-checks:
         name: frontend-checks
         runs-on: ubuntu-latest
@@ -176,3 +116,88 @@ jobs:
                   flags: backend
                   name: backend
                   fail_ci_if_error: true
+
+    dashboard-checks:
+        name: dashboard-checks
+        runs-on: ubuntu-latest
+        timeout-minutes: 25
+        env:
+            CODECOV_TOKEN_PRESENT: ${{ secrets.CODECOV_TOKEN != '' }}
+        steps:
+            - name: Checkout
+              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+              with:
+                  persist-credentials: false
+
+            - name: Set up Bun
+              uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
+              with:
+                  bun-version-file: greenfield/.bun-version
+
+            - name: Copy the future root into isolation
+              run: |
+                  mkdir -p "${RUNNER_TEMP}/mira-dashboard-greenfield"
+                  cp -a greenfield/. "${RUNNER_TEMP}/mira-dashboard-greenfield/"
+
+            - name: Install isolated dependencies
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun install --frozen-lockfile
+
+            - name: Check isolated source boundaries
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run check:boundaries
+
+            - name: Type-check isolated source and tests
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run typecheck
+
+            - name: Lint isolated source and tests
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run lint
+
+            - name: Check isolated formatting
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run format:check
+
+            - name: Test isolated future root with coverage
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run test:coverage
+
+            - name: Prefix isolated LCOV paths for the coexistence checkout
+              run: |
+                  lcov_path="${RUNNER_TEMP}/mira-dashboard-greenfield/coverage/lcov.info"
+                  perl -0pi -e 's{^SF:(?:\./)?src/}{SF:greenfield/src/}mg' "${lcov_path}"
+                  if grep '^SF:' "${lcov_path}" | grep --quiet --invert-match '^SF:greenfield/src/'; then
+                      echo "LCOV contains a source path outside greenfield/src" >&2
+                      exit 1
+                  fi
+                  grep --quiet '^SF:greenfield/src/' "${lcov_path}"
+
+            - name: Upload isolated coverage artifact
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+              if: always()
+              with:
+                  name: dashboard-coverage-lcov
+                  path: ${{ runner.temp }}/mira-dashboard-greenfield/coverage/lcov.info
+                  if-no-files-found: error
+                  retention-days: 14
+
+            - name: Upload isolated coverage to Codecov
+              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+              if: ${{ env.CODECOV_TOKEN_PRESENT == 'true' }}
+              env:
+                  CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+              with:
+                  token: ${{ env.CODECOV_TOKEN }}
+                  files: ${{ runner.temp }}/mira-dashboard-greenfield/coverage/lcov.info
+                  flags: dashboard
+                  name: dashboard
+                  fail_ci_if_error: true
+
+            - name: Verify isolated generated documentation
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run docs:check
+
+            - name: Verify isolated migration graph
+              working-directory: ${{ runner.temp }}/mira-dashboard-greenfield
+              run: bun run db:check

.oxfmtrc.json

@@ -9,7 +9,8 @@
         "migrations/**",
         "**/node_modules/**",
         "**/*.min.css",
-        "**/*.min.js"
+        "**/*.min.js",
+        "greenfield/**"
     ],
     "printWidth": 90,
     "semi": true,